Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cybermaya.in/posts/Post-40/ | Exploit Third Party Advisory |
| https://www.tendacn.com/product/download/cp3pro.html | Broken Link |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Aug 2025, 18:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tenda cp3 Pro
Tenda Tenda cp3 Pro Firmware |
|
| CPE | cpe:2.3:o:tenda:cp3_pro_firmware:22.5.4.93:*:*:*:*:*:*:* cpe:2.3:h:tenda:cp3_pro:-:*:*:*:*:*:*:* |
|
| References | () https://cybermaya.in/posts/Post-40/ - Exploit, Third Party Advisory | |
| References | () https://www.tendacn.com/product/download/cp3pro.html - Broken Link |
14 Jul 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-09 15:15
Updated : 2025-08-07 18:02
NVD link : CVE-2025-52364
Mitre link : CVE-2025-52364
JSON object : View
Products Affected
tenda
- cp3_pro
- cp3_pro_firmware
CWE
No CWE.